Pass user (possibly nobody) to pundit

In some views we try to do policy validation, however we do not
require authentication, therefore no user object is avaliable to pundit
which raises an exception (look app/policies/application_policy.rb)

Fixes #7743